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A DECODING PROCEDURE FOR THE REED-SOLOMON CODES 


Raymond S . Lim 
Ames Research Center 


SUMMARY 


This paper describes a decoding procedure for the (n,k) t-error- 
correcting Reed-Solomon (RS) code, and an implementation of the (31,15) RS 
code for the I4-TENEX central system. This code can be used for error cor- 
rection in large archival memory systems. The principal features of the 
decoder are (1) a Galois field arithmetic unit implemented by microprogram- 
ming a microprocessor, and (2) syndrome calculation by using the g(x) 
encoding shift register. Complete decoding of the (31,15) code is expected 
to take less than 500 ysec. The syndrome calculation is performed by hard- 
ware using the encoding shift register and a modified Chien search. The 
error location polynomial is computed by using Lin’s table, which is an inter- 
pretation of Berlekamp’s iterative algorithm. The error location numbers are 
calculated by using the Chien search. Finally, the error values are computed 
by using Forney’s method. 


PROLOGUE 


Historically, in the development of algebraic coding theory, the Reed- 
Solomon (RS) codes were recognized as the most powerful and elegant, and also 
the most complicated, block codes to decode. These codes were first described 
by I. S. Reed and G. Solomon in 1960. A systematic decoding algorithm was not 
discovered until 1968 by E. Berlekamp. Because of their complexity, the RS 
codes are not widely used except when no other codes are suitable. 

In 1968, a (63,53) RS code with code S 3 nnbols from GF(2^) was used to 
salvage the IBM Photo-Digital Storage System. In 1975, a (4095,4001) RS code 
with code symbols from GF(2^^) was used to make the magnetic tape archival 
data storage system viable at the Bureau of the Census, Department of Com- 
merce. In 1975-1976, a (31,15) RS code with code symbols from GF(2^) was 
designed by E. Berlekamp for use in a classified defense communication system. 
Before proceeding with a description of decoding the RS codes, it is felt that 
the following poems selected to amplify the coding spirit are appropriate. 



In Galois Fields* 


In Galois fields, full of flowers 
primitive elements dance for hours 
climbing sequentially through the trees 
and shouting occasional parities 

The syndromes like ghosts in the misty damp 
feed the smoldering fires of the Berlekamp 
and high-flying exponents sometimes are downed 
on the jagged peaks of the Gilbert bound. 

Message and Clarity^ 

A message with content and clarity 
Has gotten to be quite a rarity. \ 

To combat the terror of serious error, 

Use bits of appropriate parity. 


INTRODUCTION 


With present technology, very large memory systems (>10^^ bits) designed 
for the archival storage of digital data are critically dependent on elec- 
tronic error correction systems (EECS) for ensuring system viability and 
integrity (refs. 1, 2). In the IBM 3850 Mass Storage System, the EECS used 
is an Extended Group Coded Recording capable of correcting up to 32 8-bit 
bytes of data in a 208-byte data block. In the CDC 38500 Mass Memory System, 
the EECS used is a modified Group Coded Recording similar to that used in the 
IBM 2400 Series magnetic type systems. 

The use of magnetic tape systems for archival storage of digital data 
depended even more critically on EECS to make them viable. The EECS devised 
by Brown and Sellers, which was used in the IBM 2400 series magnetic tape 
system, is not adequate for long-term archival storage of data (refs. 3-5). 

At the Institute for Advanced Computation (lAC) , archival storage systems 
such as the UNICON 690 (or UNICON 190), magnetic tape systems, and other mass 
memory systems are no exceptions. The viability of these systems depends 
critically on EECS. For the Institute, instead of designing a different EECS 
tailored to each particular archival system, it is advantageous to design 
just one EECS powerful enough to serve all systems within the Institute. 


*By S. B. Weinstein of Bell Telephone Labs., IEEE, Trans, on Inf. Theory, 
March 1971, p. 220. 

^From Error Correcting Codes, H. B. Mann, Ed., Wiley, N.Y., 1968. 
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This paper describes the (n,k) t-error-correcting Reed-Solomon (RS) codes 
and a decoding procedure suitable for implementation with the present technol- 
ogy. In particular, a (31,15) RS code is chosen as the EECS for the lAC 14- 
TENEX central system. This code is not a binary code, but a q-ary code with 
code symbols from GF(2^). It is believed that this code is powerful enough 
to meet all anticipated lAC requirements. Because of the PDP-10, the PDP-11, 
and the ILLIAC IV computers comprising the I4-TENEX system, this code is 
planned to have two modes of operation: 36-bit mode and 16/8-bit mode. The 

decoding of this code will be implemented by hardware and firmware, and con- 
sists of four steps: (1) the syndrome calculation is performed by hardware 

using the encoding shift register and a modified Chien search; (2) the error 
location polynomial computation is performed by firmware by microprogramming 
a 2900 series microprocessor to implement the Berlekamp iterative algorithm; 
(3) the error location numbers calculation is performed by hardware using the 
Chien search method; and (4) the error values computation is performed by 
firmware using a method suggested by Forney. Finally, this (31,15) RS code 
EECS is interfaced to the I4-TENEX system by means of a standard lAC 1011- 
Interface, like the QlOll (ref. 6). With this interface, this EECS is just 
another processor in the I4-TENEX central system. 

The author wishes to thank Professor Shu Lin of the University of Hawaii 
for his initial consultation and for reading this paper. He also thanks his 
colleagues D. K. Stevenson, G. F. Feierbach, and P. Hiss for reading and com- 
menting on the work reported herein. 
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REED-SOLOMON CODES 


The Reed-Solomon (RS) codes (refs, 7-9) are the most powerful of the 
known classes of block codes capable of correcting random errors and multiple- 
burst errors. The RS codes are nonbinary codes with code symbols from a 
Galois field of q elements GF(q). From coding theory, if p is a prime 
number and q is any power of p, there are codes with code symbols from a 
q-symbol alphabet. These codes are called q-ary Bose-Chaudhuri-Hocquenghem 
(BCH) codes. 


For engineering applications at the present, only binary codes derived 
from RS codes are of interest. For this reason, GF(q) will be restricted to 
GF(2™), where m is a positive integer. The field GF(2°^) is formed by a 
primitive polynomial of degree m with a as the primitive element of the 
field. In the algebra of a Galois field, a is also called the nth root of 
unity in GF(2®) since = 1 for n = 2® - 1. With q = 2™, the code S 3 rmbols 
of an RS code are a^, i = <», 0, 1, 2, . . . , 2™ - 2, which are the 2® distinct 
elements of GF(2™). The notation = 0 is used here. 


Let mQ, d, s, and t be any positive integers, and a be an element of 
GF(q^). There exists a q-ary BCH code of length n = q® - 1 symbols that 
corrects any combination of t or fewer errors and requires no more than 2st 
parity-check symbols. Let g(X) be a polynomial of lowest degree over GF(q) 
and select q = 2^. The code generated by g(X) is a cyclic BCH code and has 


“ 0+1 „“ 0 + d -2 

as roots. The special q-ary BCH code, for which s = mg 
is called the RS code. The roots of the RS code are 


( 1 ) 

1 and d = 2t + 1, 


a, a^, a^, . . . , (2) 

Since the minimum polynomial with root of is simply (x+a^), the genera-- 

tor polynomial g(X) of a t-error-correcting RS code of length 2^-1 is 


g(X) = (X+a)(X+a^) . . . (X+a^^) (3) 

The codeword polynomials generated by g(X) consist of the multiples of 
g(X) modulo X^ + 1, and have a, a^,a^, . . . , as roots. Since g(X) has 

degree 2t, and a is a primitive nth root of unity in GF(2^), the RS code 
generated by g(X) is a t-error-correcting cyclic code with the following 
parameters : 

Code length (symbols): n = 2™ - 1 

Number of parity check symbols: n - k = 2t 

Minimum distance: d = 2t + 1 

Number of information symbols: k = 2^ - 1 - 2t 

Since a symbol in GF(2®) can be expressed as an m-tuple over GF(2), the 
parameters of an RS code over GF(2) are: 
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n = m(2^ - 1) bits 

n-k = 2mt bits 

d = 2t + 1 

k = m(2^ - 1 - 2t) bits 

In coding theory, if g(X) is a polynomial of degree n-k and is a fac- 
tor of + 1, then g(X) generates an (n,k) cyclic code (ref. 7, theorem 
4.3; ref. 8, theorem 8.1). One way to show that an RS code generated by g(X) 
is cyclic is to describe the code in terms of its roots of g(X) in GF(2°i). 
The order e of a field element is the least positive integer for which 

(a^)^ = 1. Since (a^)^ = 1, e must be a factor of n = 2™ - 1. If e 
divides n, then (X^ + 1) divides (X^ + 1) . Furthermore, an element of 

order e must be a root of (X^ + 1), then (X + a^) divides (X^ + 1), and hence 
it divides (X’^ + l). Therefore, (X^ + 1) has as roots all the n = 2® - 1 
nonzero elements of GF(2®), Since g(X) has a^, a^,a^, . . .,a^^ as roots, 
g(X) is a factor of (X^ + 1), and hence g(X) generates a cyclic code. 

ERROR CORRECTING CAPABILITY 


The RS codes over GF(2^) are very effective for correcting random and 
burst errors. Since each code symbol is an m-tuple (or m-bit symbol) over 
GF(2), a t-error-correcting RS code is capable of correcting any error pat- 
tern that affects t or fewer m-bit symbols. For example, since a burst of 
length cannot affect more than four m-bit symbols, a four-symbols cor- 

recting code can correct any single burst of length 3nH-l or less. It can 
also simultaneously correct any combination of two bursts of length mfl or 
less because each such burst can affect no more than two symbols. At the same 

time, it can correct any combination of four or less random errors. In gen- 

eral, the RS code with error correcting capability t can be used to correct 
any of the following errors: 

1. All single bursts of length bi, no matter where it starts, if 
bi < m(t - 1) + 1 

2. Two bursts of length no longer than b 2 each, no matter where each 

burst starts, if b 2 ^ m([t/2] - 1) + 1, or any p bursts of length 

no longer than bp each, no matter where each burst starts, if 

bp < m([t/p] -1) + 1 

From the above discussion, it follows that the RS code can be used to correct 
random errors, single-burst errors, or multiple-burst errors. 


CODE SELECTION 


The RS codes offer the designer a wide range of code parameters. In 
coding theory, a block code with parameters n and k is denoted as (n,k) . 

In table 1, a list of RS codes is tabulated for m equal to 4, 5, and 6 with 
t ranging from 2 to 10. For the lAC I4-TENEX system consisting of computers 
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TABLE 1- - LIST OF REED-SOLOMON CODES 



GF(2“) 

GF(2) 

m 

t 

(n,k) 

r = n-k = 2t 

n = m(2™ - 1) 

k = n-r 

A 

2 

(15,11) 

A 

60 

AA 


3 

(15,9) 

6 

60 

36 


A 

(15,7) 

8 

60 

28 


5 

(15,5) 

10 

60 

20 


6 

(15,3) 

12 

60 

12 

5 

2 

(31,27) 

A 

155 

135 


3 

(31,25) 

6 

155 

125 


A 

(31,23) 

8 

155 

115 


5 

(31,21) 

10 

155 

105 


6 

(31,19) 

12 

155 

95 


7 

(31,17) 

lA 

155 

85 


8 

(31,15) 

16 

155 

75 


9 

(31,13) 

18 

155 

65 

6 

A 

(63,55) 

8 

378 

330 


5 

(63,53) 

10 

378 

318 


6 

(63,51) 

12 

378 

306 


1 7 

(63, A9) 

lA 

378 

28A 


8 

(63, A7) 

16 

378 

282 


9 

(63, A5) 

18 

378 

270 



(63, A3) 

20 

378 ^ 

258 


with word lengths of 16 bits (PDP-lls), 36 bits (PDP-lOs) , and 32/64 bits 
(ILLIAC IV), the best choice for fitting these word lengths is the (31,15) 
code. The formats for the 36-bit and the 16/ 8-bit are shown in figure 1. 


BIT 0 1 2 ... 36 37 38 39 ... 73 74 75 76 .. . 154 


NOT ONE PDP-10 WORD ONE PDP-10 WORD PARITY-CHECK BITS 

USED 


(a) 


NOT USED 


Fitting of two PDP-10 words into 75 bits, 
Bit-0 is not used (always equal to zero) , 

. 6 7 - 23 24 - 40 41 - 57 58 - 74 75 - 154 



PARITY-CHECK BITS 


(b) Fitting of four PDP-11 words into 75 bits. 

B.(i=0, 1,2, and 3) is a 16-bit word plus parity. 

Figure 1. - Data formats of the (31,15) RS code for 36-bit and 16/8-bit 
modes. Unused leading bits are always zero. 
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ENCODING 


There are two methods for encoding linear cycle codes: the serial shift 

register method and the parallel matrix method. Let M(X) be a message poly- 
nomial with k symbols encoded into a code polynomial (codeword) V(X) with 
n symbols. In the serial shift register method, encoding in systematic form 
is accomplished by dividing X’^"^ M(X) by g(X) and appending the remainder 
r(X) to X""*^M(X). That is 


V(X) = r(X) + X" ^M(X) = q(X)g(X) (4) 

where q(X) is the quotient. This indicates that [r(X) +X’^~^M(X)] is a mult- 
iple of g(X) and, therefore, is a code polynomial generated by g(X). The 
codeword generated is 


(rorira . . . rngmi . . . mj^_p 


parity check 


message 

bits 


bits 


and the most significant symbol of the message, is sent first. 


In the parallel matrix method, the generator matrix G has the form 


^ X (n-k) ’ X k^ 


(5) 


where P is a k x (n-k) matrix generated by retaining the remainder of 

n-k+i 

g(xr > i 1* 2, . . ., k - 1 (6) 

and I is a kxk identity matrix. The encoding of the message vector M 
to a code vector V is 

V = MG (7) 

The (31,15) RS code has n = 31, k = 15, m = 5, and t = 8. The primi- 
tive polynomial p(X) = X^ + X^ + 1 can be used to generate the 31 nonzero 
elements of GF(2^), as shown in table 2. The generator polynomial g(X) 
from equation (3) is 

g(X) = (X+a)(X+a2) . . . (X+al5)(X+a^^) (8) 

Multiplying out the terms of g(X), the general form of g(X) is 

15 

g(X) = X^^ + a, X^ = X^^ + di5 X^5 + ai4 X^** + . . . + cti X + ao (9) 

• i=0 ^ 


The evaluation of in equation (9) is straightforward but extremely tedi- 
ous. In order to avoid errors, a computer program should be used in conjunc- 
tion with table 2 for such evaluation. 


The implementation of equation (9) for encoding using the parallel 
matrix method is a matrix G as shown in figure 2. Each o^i,j in the 
matrix G is a field element in GF(2^). The encoding. of M(X) into V(X) is 
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TABLE 2. - GALOIS FIELD OF 2^. 




0 

1 

2 3 

4 

5 

6 7 8 

9 

10 11 

12 13 14 15 jl6 17 

18 • • • 

28 29 30 

0 

^‘o.o 

“o.l 

“0,2 



• • • 



, “0,13 “O.U “0,15 1 ’ ° 

0 • • • 

0 0 0 

1 

®1.0 

“l.l 

“1.2 



• • • 



“1,13 “1,14 “1,15 1 ° ’ 

0 • • • 

0 0 0 

z 

®2,0 

“z.l 

“2.2 



• • • 



“2,13 “2,14 “2,15 1 ° ° 

1 • • • 

0 0 0 



• 

• 

. 1 

• 


• 


• 


7 

• 

• • • 

• 1 

• 


• • • 


• 



• 

• 

• 1 

• 


• 


• 


8 










9 



1 







10 










11 










12 

“12,0 “12,1 “12,2 

• • • 

“12,13 “12,14 “12. isl ° 

0 

0 

• • • 

1 

0 

0 

13 

“13,0 “13,1 “13,2 

• • • 

“13,13 “13, 14 “13. 151 ° 

0 

0 

• • • 

0 

1 

0 

14 

_“14,0 “14,1 “14,2 

• • • 

“14,13 “14,14 “M.isl ® 

0 

0 

• • • 

0 

0 

1 


Figure 2. - Generator matrix G of (15,13) Reed-Solomon codes; 
a. . is a field element from GF(2^). 
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( 10 ) 


V(X) = (momim2 . . • nij^_2 

where the message symbol is the most significant digit. From figure 2 

and equation (10), the parallel matrix encoding method requires about 
15 X 16 = 240 Galois field multipliers. Because of the logic complexity, this 
method is generally not used except for very high-speed applications, or when 
G is very simple. For example, consider a 32-bit memory system built by 
using n words by 4-bit integrated-circuit, random-access memory (IC RAM) 
chips. In such a memory system, a single chip failure will result in a 4-bit 
error in the 32-bit word. A t = 1 (15,13) RS code with code symbols from 
GF(2**) can be used for error correction in such a memory system. The G 
matrix of this code requires about 13 x2 = 26 Galois field multipliers. Using 
current technology, these multipliers can be implemented by table lookup using 
read-only memory (ROM) chips. 

There are two shift register methods for encoding linear cyclic codes. 

One method uses a (n-k)-stage shift register, and the other uses a k-stage 
shift register (ref. 7). In practice, the (n-k)-stage shift register is most 
commonly used unless n-k is much greater than k. For encoding the (31,15) 
RS code, a (n-k) = 16 stages shift register (fig. 3) can be used to implement 
equation (4). The feedback multipliers oq, «!, • . •, ais are field elements 
of GF(2“). Each R^ register stage is a 5-tuple shift register. The 
opsration of the encoder is as follows. With SI set for feedback and S2 set 
to position 2, k information symbols are shifted into the encoder and simul- 
taneously sent to the channel. Then SI is turned to disable the feedback and 
S2 is turned to position 1; the 16 parity-check symbols stored in the encoder 
now are shifted out to the channel, clearing the shift registers. 



Figure 3. - Encoder for (31,15) code; is a field element from 
GF(2^) and R^ is a 5-tuple shift register stage. 
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DECODING 


In this section, an error correction procedure is described for the (n,k) 
t-error-correcting RS codes, and a design implementation is shown for the 
(31,15) t = 8 RS code. As described earlier in encoding, RS codes are non- 
binary codes. Therefore, the decoding procedure involves finding not only 
the error locations, but the error values as well. A t-error-correcting RS 
code generated by g(X) is a cyclic code, and the codewords consist of all 
multiples of g(X). The degree of g(X) is 2t and its roots are a, a^, . . ., 
Since every codeword is some multiple of g(X), a, a^, . . ., are 

also roots of every codeword. 

Let V(X) be the transmitted codeword, E(X) be the channel noise error 
pattern, and R(X) be the received codeword represented as follows: 

V(X) = Vq + vi X -f V2 + . . . + ^ 

E(X) = 6q + e^xH- e2X^ + . . .+ ^ 

R(X) = ro r^ X + r2 x^ + . . .+ r^_^ x’^ ^ 

where v^, e^, and r^, i = 0, 1, 2, . . .,n-l, are elements of GF(2^) . At the 

decoder, 

R(X) = V(X) + E(X) (11) 

The error pattern E(X) can be described by a list of values and locations of 
its nonzero components. For the decoding procedure to be described, the 
error location will be given in terms of an error- location number, which is 
simply for the (n-j)th symbol. Let X^ be the error location number 

and ej be the error value. Then for each nonzero component of E(X), a 
pair of field elements (xj , ej) is required to describe that error. If E(X) 
has p errors, then p pairs (x^, Cj) are required to describe the errors. 
Any decoding procedure is a procedure for locating these p pairs of (x • , e.) 
if p < t. ^ ^ 

Assume that E(X) is an error pattern of p errors at locations jj, 

32 * • • jp- Then 

E(X) =64 + 64 + e (12) 

J 1 J 2 Jp 

where p ^ t and 0<ji <j 2 <...<jp^ n-1. The first step in decoding is 
to check whether V(X) is a codeword by calculating the syndrome. If the 
syndrome is zero, then either V(X) actually has no errors or V(X) has an 
undetectable error. In either case, V(X) is accepted as no error. A nonzero 
syndrome indicates that an error has been detected; the error may or may not 
be correctable. For the RS codes, the syndrome is defined as a vector S 
with 2t components as follows (refs. 7, 8): 

= R(a^) = ro + ri + r2(a^)^ + . . . + 
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for i = 1, 2, 3, . . 2t. Combining equations (11) and (13) gives the result 


S. = V(a^) + E(ct^) 


Since V(ci^) = 0, 


Si ' s(c,i) . ejjXjj 

Combining equations (12) and (15) gives the result 

= ej^(a^l)^ + ej2(ot^^)^ + . . . + ejp(a^P)^ 

for i = 1, 2, . . 2t. Expanding equation (16) gives the result 

Si = e-i, ^ + e-i^a^^ + . . . + e.: a^P 

^ Jl 12 Jp 


S 2 = e^,(a^^)2 + e-i^(a'‘^)^ + . . .+ e-:_(a'^P) 


12x2 


»1dx 2 


'1 1 


'12 


Ip 


>2t = + . . . + ejp(a-^P) 


,l2x2t 


2t 


(U) 


(15) 


(16) 


(17) 


Equation (17) is a set of 2t nonlinear equations which relates the 2t 
known quantities of to 2p unknowns, consisting of p unknown locations 

and p unknown error values. Any error correction procedure is a method of 

solving this set of equations for the p pairs of (^j^, a^^), £ = 1, 2, . . 

p. Once a^P are found, the powers iiy 22^ • - '’jp will indi- 

cate the error locations in E(X). In general, there might be many error pat- 
terns that satisfy the 2t equations. If p < t, then the error pattern 
with the smallest p is the actual error pattern. 


For notational convenience, let 

s = £ = 1, 2, . p 


(18) 


be the error location numbers (refs. 7, 8). Now equation (17) can be written 
as 

+ 6p 




^2 = ®ji 

ef + 

2t = 

+ ej 


• + ®jp Bp" 


2t 


32 2 


+ . . . + e^ 3 


2t 


p"p } 


(19) 


These 2t syndrome components are symmetric functions in 32> • • •> 3p» 

which are known as power-sum symmetric functions. Next, let the error loca- 
tion polynomial be defined as follows: 


11 



( 20 ) 


a(X) = (1 +6i X)(l+ 62X) . . . (1 +6p X) 
= 00 + 01 X + 02 X 2 + . . . + 0 p xP 

where 

ao = 1 

02 = Bi 62 + B3 + . . . + 6p_i 6p 

03 = 61 62 33 + 61 $2 33 + • • • + 3p_2 3 p_^ Sp 


0p = 3i 32 33 . . . 3p j 

The roots of o(X) are which are the inverses of the 

error location numbers. It can be seen from equations (19) and (21) that 
the coefficients of a(X) are related to the syndrome components i = 1, 

2, . . 2t. The coefficients 02 > • • . , Op are known as elementary sym- 
metric functions of gj, • • •> There^re, if it is possible to find 

a(X) from the syndrome components, the error location numbers can be found 
and the error pattern E(X) can be determined. In the following, an effec- 
tive decoding procedure is described and a design implementation for the 
(31,15) RS code is given. This procedure consists of four major steps as 
follows (refs. 7, 8) . 


1. Calculate the syndrome S = (Si, S 2 , • . S^^) from R(X) 

2. Calculate the error location polynomial a(X) from S 

3. Determine the error locations Xj by finding the roots of a(X) 

4. Calculate the error value ej from Xj and S 


STEP 1. SYNDROME CALCULATION 


There are two methods for calculating the syndrome (S) : the standard 

method, and the shift register method. -The standard method uses equation 
(13) because this is the way the syndrome is defined. The shift register 
method uses the g(X) encoding shift register. 


In the standard method,, the syndrome calculation given in equation (13) 


IS 


Si = ro + ri + r2 + . . . H- 


n-1 


n-1 


= tq + ri + r2 + . . . + ^ 


S3 = tq + ri + T2 + 


2(n-l) 
3 (n-1) 


( 22 ) 


n-1 


2t 


4t 


= ro + ri a + r 2 a + . . . + ot 


2t(n-l) 
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In matrix form, equation (22) can be written as 


S = RH = (ro ri r2 . . . 


i = 1, 2, 3, . . 

3 = 0 , 1 , 2 , . . 


, 2t 
,n-l 


(23) 


— ^n X 2 1 


where is an n rows by 2t columns matrix. For the (31,15) t = 8 RS 

code, is a 31 X 16 matrix shown in figure 4. An all-parallel syndrome 

calculation would require about 480 multipliers and 16 31-input modulo-2 add- 
ers in GF(2^), which is indeed very expensive. One compromise is a serial- 
parallel method using 16 circuits of the type shown in figure 5. These cir- 
cuits required 31 clock cycles to calculate S, or about 1.55 psec at the 
present STTL technology. 
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Figure 4, - Parity-check matrix for the (31,15) t = 8 
Reed-Solomon code. 
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Figure 5. - Circuit for calculating the syndrome component S^. 
Approximately six SILL MSI ICs are required. 


For large t(ts4), the best way to calculate the syndrome is to use the 
g(X) shift register. This will result in some saving in logic because this 
shift register is already used for encoding. However, the S calculated by 
g(X) is not the same as the S calculated by R(ai) of equation (13), but 
they are related. This relationship is described below. 


From equation (13), let 

s = 

(Si, S 2 > • • • » S21-) 

(24) 

be the syndrome calculated by 

R(a^) with 



= R(a^) 

(25) 

for i = 1, 2, . . 2t. Let 

s* = 

(S *, S 2 * S*^) 

(26) 


be the remainder calculated by dividing R(X) by g(X). The remainder S* 
is another form of the syndrome but S* S. Using the Euclidean division 

algorithm, the result of R(X)/g(X) is 

R(X) = Q(X) g(X) + S*(X) 
where Q(X) is the quotient and 
14 


( 27 ) 








(28) 


S*(X) = Sj* + S 2 * X + S 3 * X2 + . . . + $ 2 * X^^ ^ 

is the remainder. Substituting X by in equation (27) gives the result 

R(a^) = Q(a^) g(a^) + S*(a^) 

= S*(a^) (29) 

since Q(a^) g(a^) = 0. From equations (25), (28), and (29)', the relationship 
between S and S* is 

S, = S*(a^) 

1 

= S^* + S2*(a'^) + S3*(a^)2 + . . . + S2*t (30) 

for i = 1, 2, . . 2t, The relationship of equation (30) can be implemented 

by the circuit shown in figure 6. This circuit is very similar to the Chien 
search circuit as described later in step 3. In figure 6, the 2t components 
of S can be obtained from S* in 2t clock cycles. 



Figure 6. - Modified Chien search circuit for obtaining from 


In the above discussions, two basic methods for syndrome calculations 
were presented. For large t, it is concluded that the best way to calculate 
the syndrome is to divide R(X) by g(X) to obtain S*(X), and then obtain 
Sj[ from Si* by a modified Chien search circuit. If R(X) contains no error, 
S*(X) = 0, and this calculation takes n clock cycles, which is the same 
speed as the serial-parallel method of figure 5. If R(X) contains an error, 
is obtained from S^*; then go to step 2, and so on. One significant 
point, which should be mentioned, is that this method of syndrome calculation 
requires practically no additional logics because both the g(X) shift regis- 
ter and the Chien search circuit already exist. 

sm 
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STEP 2. o(X) CALCULATION 


A method for calculating the error location polynomial a(X) is given 
below without proof. This method is the Lin's table (ref. 7), which is an 
interpretation of Berlekamp's iterative algorithm (ref. 9). The same method 
can also be found in reference 8 in a slightly different form. 


To find a(X), start with the table 

M d 

___ -E 

-11 1 

0 1 Si 

1 
2 


£ 

0 

0 



-1 

0 


2t 


and proceed to fill out the table. Assuming that the table has all rows 
filled out up to and including the yth row, then fill out the (y+l)th row 


as follows: 




p(y+l)(X) ^ and Z , = H 

y+1 y 

1 . 

If 

d 

y 

= 0, 

then 

2 . 

If 

<iy 

^ 0, 

find 

another row preceding the yth row, say the pth 


row, such that the number p - £p in the last column of the table 
has the largest value and dp 5 ^ 0. Then 

. /'‘’’a) + dp-i (31) 

and 

a = max[£ , £ +y-p] (32) 

y+1 y P 


In either case, 
d 

V V (y+1) 

where the a. 


- c 4 . „ (y+1) Q 4 . 

y+1 “ ^+2 + '"I ®y+l + 


(y+1) 

^y+1 y+2~^y+l 


are the coefficients of o^^'*'^^(X), 


(33) 


^(y+l)(X) ^ I ^ Oi^'^''’^^X + 02^^"'’^^ X2 + . . . + X^y+1 (34) 

If V(X) has exactly t errors, then the polynomial a^^^^(X) in the last 
row is the required a(X). If V(X) has more than t errors, then c(^^)(X) 
has degree greater than t, and generally it is not possible to locate the 
errors. If V(X) has fewer than t errors, the table terminates into a mode 
prior to step 2t where d^ = d^^.^ = 0 and a^l*)(X) = o(^+l)(X). 
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The computation for a^^^(X) and combined, on the average, requires 
about 2t additions and 2t multiplications for each step. Since there are 
2t steps, the total is about 4t^ additions and 4t^ multiplications. For 
the (31,15) t = 8 RS code, at most 16 iterative steps are required to obtain 
a(X), and each step requires about 16 additions and 16 multiplications in 
GF(2^), plus inversions. At the present technology, an economic method for 
performing these computations is to have a Galois field arithmetic unit imple- 
mented by microprogramming a microprocessor like the 2900 series microproces- 
sor family. With a few hardware augmentations for inversions and special 
instruction controls, these Galois field arithmetic computations can be exe- 
cuted at 100 nsec per instruction. At this rate and allowing a 300% program 
overhead, the a(X) calculation would take about 100 psec. 


STEP 3. DETERMINATION OF ERROR LOCATIONS 


The error location numbers are the reciprocals of the roots of a(X). 

The roots of a(X) can be found simply by substituting 1, a,a^, . . .,a^“^ 
into a(X). Since = 1, then = a^“^. Therefore, if is a root of 

a(X), is an error location number and the received digit 

error. If n is large, this substitution method is not desirable because 
the length of computation can be long. 


If aj_, i = 1, 2, . . ., p, and p ^ t are known from step 2, and using 
the fact that RS codes are cyclic, a procedure credited to Chien known as the 
Chien search (refs. 7-9) can be used to find the error location numbers. The 
received codeword R(X) is tested on a digit-by-digit basis starting with the 
high-order digit first. To decode i^n-l> decoder tests whether 

Q^n-1 error location number. This is equivalent to testing whether a 

is a root of a(X). If a is a root, then from equations (20) and (21), the 
result is 


Oi a + 02 


0 a 
P 


P ^ 


= 1 


(35) 


If equation (35) is satisfied, then is an error location number and 

the digit has an error; otherwise, r^_j^ has no error. To decode 

the decoder tests 


oi + 02 + . . .+ 0 = 1 (36) 

P 

If equation (36) is satisfied, then is a root of o(X) and the digit 

Tn-£ has an error; otherwise, has no error. 


The error location numbers testing procedure of the Chien search can be 
implemented in a straightforward manner by a circuit such as that shown in 
figure 7. The t o-registers Ri, R 2 , . . ., Rt are initially stored with 
Oi , 02 > • • • , CT|- calculated in step 2. It should be noted that if p < t, the 
register stages ^p+2» • • * > ^t stored with zero since 

^p+1 ” ^p+2 = • • • = = 0, To test the circuit is pulsed once. The 

multiplications are performed and Oj a, 0201 ^, . . ., Op are stored in the 
o-registers. The output of the SUM circuit is 1 if and only if the sum 
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Figure 7. - Chien search cyclic error location circuit. 


a 1 a + 00 4* . . . + a = 1 

P 

Otherwise, the output of SUM is 0 or a^. Having tested the circuit is 

pulsed againi Now 0 ^ 0 ^, 020 ^, . . - , SLYe stored in the o-registers. 

The output of the SUM circuit is 1 if and only if the sum 

0 ] + 00 + . . . + 0 = 1 

P 

Otherwise, the output of SUM is 0 or a^. This process continues until all 
n digits of R(X) are tested. The SUM output is shifted to an n-bit X^- 
register. For example, for n = 15 and if the pattern in the X^-register is 

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 

00010010000 0 1 0 0 
then the digits numbered 12, 6, and 3 of R(X) are in errors. 

For the (31,15) t = 8 RS code, eight 5-tuple register stages are 
required. The multiplication circuits of a, a^, . . . , a® can be implemented 
by table lookup using ROMs. The function of the SUM circuit can best be per- 
formed by the microprocessor since this function requires only eight XOR 
operations and a testing for ” 1” operation. 


STEP 4. CALCULATION OF ERROR VALUES 


The error values ^ ~ 2, . . ., p, can be calculated from equation 

(19) once the syndrome components Si, S 2 , • . and the error locations 

numbers 3i, 32» • • • > 3p are known. The set of equations in equation (19) is 
linear and one method of solving it for ej^ is credited to Forner (refs. 
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7-9) . It should be noted that the error location number is equal to 

and = a~^, where is a root of o(X) as described in 

step 2. Once the p pairs ej^) for 2. = 1, 2, . . p are known, E(X) 

in equation (12) can be determined. 

To find ® 3 £» 

Z(X) = 1 + (Si +oi)X + ($2 +Oi Si + 02 )x2 + . . . 

+ (Sp +0 1 Sp_i + a2Sp_2 + . . . +Op)XP (37) 


then 

Z(3-l) 

(38) 

H (14-3, 3n ) 

i=l ^ ^ 

The computation of ej^ in equation (38) is relatively complex. For a 

t-error-correcting RS code, and assuming E(X) has p ^ t digits in errors, 
the computation of Z(X) requires p+p(p4-l)/2 additions and p(p4-l)/2 
multiplications for each digit in error. Let D be the denominator of equa- 
tion (38). The interpretation of D is that D should consist of P - 1 

terms. The missing term in D is the term where 3^ = The computation 

of D requires p - 1 additions and (p-1) 4- (p-2) multiplications for each 
digit in error. 

For the (31,15) t = 8 RS code, the computation of e.i in equation (38) 

can be performed by the Galois field arithmetic unit implemented by micropro- 
grams in the 2900 series microprocessor. Assuming a 100-nsec instruction 
execution rate and a 100% program overhead, the computation for each error 
value will require about 20 ysec, or about 200 psec for all eight error values. 



CONCLUSION 


A decoding procedure has been described for the (n,k) t-error-correcting 
Reed- Solomon (RS) codes. The code parameters are chosen such that the codes 
are cyclic so that encoding and some parts of decoding can be implemented by 
shift registers. In particular, a logic implementation scheme has been pre- 
sented for the (31,15) t = 8 RS code.* The principal features are (1) a 
Galois field arithmetic unit implemented by microprogramming a 2900 series 
microprocessor, and (2) syndrome calculation by using the g(X) encoding shift 
register. This arithmetic unit is capable of executing instructions at a 
100-nsec clock cycle rate. Encoding the (31,15) code would be implemented by 
shift registers requiring 31 clock cycles (3.1 psec). Decoding the (31,15) 
code requires four steps of computation with a total decoding time of about 
500 psec. With present technology, it is felt that the microprogrammable 
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microprocessor is the most feasible approach to decode this code except for 
the case where n and t are small, for example, n < 15 and t < 2, For these 
cases, an all-parallel method is probably more suitable. 


Ames Research Center 

National Aeronautics and Space Administration 

Moffett Field, California 9A035, March 8, 1978 
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